In the docs Engineering notes
Violin / Documentation
Engineering notes
Architecture, coverage discipline, and evidence-based evaluation. Read the full articles in the repository.
Guardrails for Agentic Pentesting
Why prompt-level guardrails consistently fail at the tool boundary, the required-guard architecture, AST-based command parsing, and how findings bind to signed receipts.
Read the article ↗Coverage Discipline for Agent-Assisted Pentests
How to turn an ad-hoc LLM testing session into a systematic assessment with auditable coverage dispositions, negative evidence tracking, and closeout gates.
Read the article ↗How to Evaluate an Agentic Pentest Tool
A practitioner checklist for cutting through agentic marketing hype: non-determinism distributions, proof rules, and why report prose must receive zero credit without receipts.
Read the article ↗